Cloud-based streaming tools provider StreamElements has acknowledged a data breach stemming from a third-party service it previously collaborated with after a threat actor leaked customer data samples on a hacking forum. 

While StreamElements confirmed its own infrastructure remains uncompromised, the breach involves legacy data held by a provider they severed ties with within 2024. 

In a public statement shared on X, the company emphasized that its internal systems were not affected and reassured users that it is taking immediate steps to address the situation. 

“Although this incident did not originate from within our infrastructure, we are taking proactive measures to support impacted users and understand the full scope of the breach,” the company noted. 

StreamElements, a widely used platform among Twitch and YouTube creators, offers tools such as stream overlays, analytics, chatbots, loyalty systems, and more. Trusted by over a million content creators, the platform also maintains partnerships with leading gaming brands. 

The breach came to light when a threat actor, operating under the alias “victim,” claimed on March 20, 2025, to have accessed sensitive details belonging to approximately 210,000 StreamElements users. Shared data samples reportedly include full names, addresses, emails, and phone numbers. 

Journalist and streaming industry insider Zach Bussey confirmed the leak's authenticity after receiving his personal details from previous transactions as proof from the attacker. According to claims made by the hacker, the breach was facilitated through malware that compromised a StreamElements employee’s device, leading to unauthorized access to the company’s order management system. The stolen records reportedly span from 2020 through 2024.   

Although StreamElements has not yet issued direct notifications to affected users, it has warned the community about ongoing phishing attempts leveraging the breach. The company’s investigation remains active, and the post containing the stolen data on BreachForums has since been removed. Users who were active on the platform during the affected years are urged to stay cautious and monitor for suspicious communications.